CVE-2021-40592

GPAC vulnerability CVE-2021-40592 affects GPAC versions before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards). The issue is an infinite loop in the ISOBMFF reader filter (isoffin_read.c) in isoffin_process(), which can cause a denial of service if a user opens a speciall...

Bento4 Denial of Service Vulnerability (CNVD-2022-74158)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...

Buffer Overflow

libgpac.so is vulnerable to buffer overflows. The vulnerability exists in diSTboxread in boxcode3gpp.c because when gpac parses an mp4 file, the video content and the buffer length is controllable by the user which causes a stack overflow...

The vulnerability of the gf_isom_oinf_read_entry function in the MP4Box component of the GPAC multimedia platform allows a hacker to gain access to confidential data.

The vulnerability of the gfisomoinfreadEntry function in the MP4Box component of the GPAC multimedia platform is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a specially...

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

Bento4 heap buffer over-read vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 1.6.0-639 has a security vulnerability for which no detailed vulnerability details are available...

in gpac/gpac

Description Null Pointer Dereference in gitnboxdel Proof of Concept bash echo -n AAAAEW1ldGEwMDAwMDAwMDAAAABjMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAARZ2l0bjAwMDAwMDAwMA== | base64 -d poc ./MP4Box -bt ./poc...

Mageia: Security Advisory (MGASA-2019-0146)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information through a specially created MP4 file...

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

UBUNTU-CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

Buffer overflow

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40568

GPAC (mediaplayer framework) is affected by CVE-2021-40568 due to a buffer overflow in the svc_parse_slice function in av_parsers.c, exploitable via a malformed MP4 file. Affected versions include GPAC up to 1.0.1; impact includes denial of service, with potential code execution and privilege esc...

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

DEBIAN-CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 1.0.1, which stems from a heap-based buffer overflow vulnerability in MP4Box of GPAC 1.0.1, which can be exploited by an attacker to produce unspecified other impacts through files made in MP4Box commands by usin...